aboutsummaryrefslogtreecommitdiff
path: root/test/ssl-tests
AgeCommit message (Expand)AuthorFilesLines
14 daysAllow an empty NPN/ALPN protocol list in the testsMatt Caswell4-244/+443
2024-04-19Adjust tests that were depending on X25519 and X448 in fipsTomas Mraz4-146/+154
2024-04-09Copyright year updatesRichard Levitte1-1/+1
2024-01-03Set max protocol version for dtls renegotiation tests to dtls1.2Frederik Wedel-Heinen2-0/+18
2023-09-07Copyright year updatesMatt Caswell2-2/+2
2023-07-05Minor fixesHugo Landau2-57/+0
2023-06-27Add some test_ssl_new tests for the ffdhe groupsMatt Caswell2-759/+1305
2023-06-14configure: introduce no-ecx to remove ECX related featureYi Li1-2/+2
2023-04-21test: update ssl_new tests in line with pedantic FIPS policyPauli2-0/+14
2022-10-18Add support for compressed certificates (RFC8879)Todd Short2-0/+391
2022-10-12Add a test for TLSv1.3 only client sending a correct key_shareMatt Caswell2-253/+1052
2022-10-07Add some more brainpool tests for TLSv1.3Matt Caswell2-451/+655
2022-10-07Reimplement brainpool TLSv1.3 support group supportMatt Caswell2-2/+2
2022-06-03Change the SCT issuer key to RSA 2048Bernd Edlinger2-25/+13
2022-06-03Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz2-289/+482
2022-06-03Add a test_ssl_new testcaseTomas Mraz2-0/+57
2022-05-27Check that UnsafeLegacyServerConnect option existsTomas Mraz2-111/+157
2022-05-08tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at security level one and abovePauli2-3/+8
2022-05-03Update copyright yearMatt Caswell1-1/+1
2022-01-05Fix typosDimitris Apostolou1-2/+2
2021-12-14Add a TLS test for name constraints with an EE cert without a SANMatt Caswell2-1/+37
2021-11-26Enable brainpool curves for TLS1.3Bernd Edlinger2-4/+4
2021-10-09Fix tests for new default security levelMatt Caswell6-143/+176
2021-06-17Update copyright yearMatt Caswell1-1/+1
2021-06-15Move AllowClientRenegotiation testsRich Salz2-1/+93
2021-05-06Update copyright yearMatt Caswell2-2/+2
2021-04-29Adjust ssl_test_new for SHA1 security levelMatt Caswell5-28/+68
2021-03-08Fix the check for suitable groups and TLSv1.3Matt Caswell2-39/+85
2021-03-03test_ssl_new: X448, X25519, and EdDSA are supported with fipsTomas Mraz3-193/+179
2021-02-18Update copyright yearMatt Caswell2-2/+2
2021-02-12ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3Tomas Mraz2-198/+967
2021-02-05Stop disabling TLSv1.3 if ec and dh are disabledMatt Caswell3-7/+22
2021-01-28Update copyright yearRichard Levitte1-1/+1
2021-01-26TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb2-61/+103
2021-01-07Update copyright yearMatt Caswell1-1/+1
2021-01-0528-seclevel.cnf.in: fix typo in algo nameEtienne Millon1-2/+2
2020-12-02Fix no-dtlsMatt Caswell1-1/+2
2020-09-18Add fips checks for ecdh key agreementShane Lontis2-190/+191
2020-09-18Add fips checks for ecdsa signaturesShane Lontis2-121/+121
2020-08-20Test mte with stitched ciphersuites in TLSv1.0Matt Caswell2-1/+136
2020-06-27Reduce the security bits for MD5 and SHA1 based signatures in TLSKurt Roeckx11-1801/+1845
2020-06-19Modify libssl to discover supported groups based on available providersMatt Caswell2-4/+0
2020-06-09Add a test for renegotiation with EXTMS droppedTomas Mraz2-1/+52
2020-05-14test/ssl-tests/20-cert-select.cnf.in: Re-enable RSA-PSS related testsRichard Levitte1-4/+1
2020-04-29Amend references to "OpenSSL license"Shourya Shukla1-1/+1
2020-04-23Update copyright yearMatt Caswell29-29/+29
2020-04-20Teach ssl_test_new how to test the FIPS moduleMatt Caswell14-922/+1042
2020-04-20Teach ssl_test_new to have different tests for different loaded providersMatt Caswell2-483/+484
2020-03-06Use .cnf for config files, not .confRich Salz60-1/+1
2020-02-11Check that ed25519 and ed448 are allowed by the security levelKurt Roeckx2-32/+105